OK, so /dev/pass11 is not readable/writable by bacula. I know it used to be. I recalled a system ability for altering device permissions at run time. It took a bit of hunting in /etc to located it, but I found /etc/devfs.conf. In it, I found this near the end: